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MEMORANDUM FOR THE RECORD 


25X1A FROM 


SUBJECT: 


1. 


Chief, B Division, Office of Data Processing 


DDA Considerations on "A Plan for Accelerating the 
Provisions of ADP Support to DO Field Stations" (S) 


The following represents comments from DDA representatives 


on the CRAFT Working Group. These include [I 25x14 


2s 


It 
support 
iveness 
risk of 


station 


X1A 


SCOPE 
is the stated purpose for the CRAFT system to provide "ADP 
(which) is intended to increase the efficiency and effect- 
of information handling in the field, and to reduce the 
compromise of sensitive information in the event of a 


overrun (etc.)". It is difficult to perform analysis of 


the proposal without clarification on the meaning of the statement. 


Existing CRAFT documentation does not amplify on the interpretation 


to be used. There is no precise definition of what records are 


maintained by a DDO officer in the field (not just the case officer) 


Approved For Release 2001/04/01 : CIA-RDP84-00933R000500140015-8 


SECRET 


. (SECRET | FT 
Approved For Rekease 2001/04/01 : ropes cosgorocesdo WS 


or why these records are maintained. Issues related to record 
destruction are not necessarily ADP issues. What is the problem 
that automation is to solve? Can automation solve it? It is not 
obvious that ADP provides a solution. (S) 

3. ARCHITECTURE 

Without a definition of scope and the ensuing requirements 
analysis, a specification of system architecture as either stand- 
alone data processing elements in the field or data processing at 
Headquarters cannot be validated. How can the architecture be 
assessed to determine the effectiveness of the proposed solution 
without a specification of the requirements the solution must satisfy? 
What is the relationship between field record holdings and the 
existing data bases at Headquarters! If TEMPEST modified and 
reconfigured, would ODP's GIMINI project be preferable to the 
Honeywell computers? Is it intended for the procurement of the 
Agency standard terminal to occur through ODP's contract? (S) 

4. MANAGEMENT 

The recommendation for continued use of a CRAFT Board, Working 
Group, in-house Implementation Team is not consistent with standard 
Agency practices for system development on a program of this size. 
Since the earliest days of the U-2 aircraft development, formal 
program office structure has been advocated. Significant system 
developments have relied upon contractual support to provide the 
necessary materiel and man-power requirements. Why is this project 


managed differently? ODP and Agency standards on the structure of 
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feasibility studies appear to be applicable to the CRAFT project. 
Why is this methodology not being used? (S) 

5. RESOURCE (FUNDING) ESTIMATES 

Because of the system architecture and management issues, it 
is difficult to accept the estimates of the resources required to 
realize the (unspecified) level of ADP support. In any event, the 
paper does not show the derivation of the estimates as provided. 
Do the dollar and man-power estimates represent "educated" guesses? 
The paper indicates the need for large numbers of ADP personnel 
required for this project. How were these numbers derived? What 


alternatives were considered? 


6. Comments provided by P| include: 


° Discussion of the Plan is at too low a level to 


commit resources. 

The communication requirements may require 
coordination with the State Department in 
light of their efforts. 

There is no involvement of the DDO Officer 
in the requirements definition. 

The technical considerations (computers and 
communications) is beyond the understanding 
of some members of the Working Group. 
Inadequate detail in the paper precludes 


competent evaluation of it. (A/IUO) 
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7. Comments provided by the Office of Training concerned 
the lack of mention of OTR requirements in the Plan. What support 
shall be requested by the DDO and DDA in order to fulfill CRAFT 
needs? Unless the requirements for OTR support are clearly estab- 
lished it is impossible for OTR to state whether the resources 
requested are available. (A/IUO) 


8. Comments provided by the Office of Finance included: 
25X1A 


° There is apparent confusion within the Plan on 


to CRAFT? 


eh feet, 25X1A 
° Does the study provide adequate justification for 


a concept of one work station ae 
officers? 

° The interface requirements for the Agency standard 
terminal is not specified for all locations. 
Should there be an attempt to provide such interface 
uniformly to reduce the burden on the communications 


operators? (C) 
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9. Concerns expressed by the Office of Logistics include: 
° The Plan is so general the impact upon the Directorate 

of Administration cannot be determined. 

Is it intended for the procurement of materiel to 

be via standard Agency contractual mechanisms? 

Competitive procurement (including sole source awards) 

require systems studies to be performed. Does the DDO 

intend to provide the documentation required in support 

of these procurements? 

Logistics and Data Processing are currently working 

on a Materiel Management Project. How does this 

effort relate to CRAFT? 

° Some Logistics requirements which could possibly be 
incorporated into the short term recommendation 


25X1A 


include: 


- Data system to allow the elimination of Form 88. 


° Logistics is available to discuss these matters, and 
others, with those responsible for system procurement 
and development to assist in requirements definition. 


(S) 
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10. Concerns expressed by the Office of Communications include: 
° Communications strongly desires to be supportive 

of the CRAFT program, but there may be insufficient 

lead time to obtain the personnel necessary to 

support the project. The Plan does not contain 

sufficient data for Communications to determine. 

System sizing is not clearly established. Present 

Communications activities (SC-3 and Project Mercury) 

will absorb all on-board techs. Contracted install- 

ation of the equipment may alleviate a portion of 

this problem. 

There is concern over the emphasis in the Plan on 

system implementation and not functional requirements. 

Will the system as specified, adequately support the 

end users? 

° It is not possible to determine the scope of the 
effort from the document in order to determine the 
impact of accelerated CRAFT on Communications. The 
Office needs at least the functional requirements 
in order to assess CRAFT's impact on existing programs 
such as Mercury. 

° Communications perceives the maintenance burden implied 
by the short term recommendation to be significant, 


contrary to the statement in the Plan. 
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Communications has difficulty in reconciling the 
radically different system architectures proposed 

for the short and long terms with the statement 

of intended compatibility. 

Is the project being adequately managed in order 

to achieve success? 

System interface specifications must be well-defined 
in order to assure the integration of CRAFT activities 
with existing or planned facilities. (S) 

11. Preliminary observations on the accelerated CRAFT 
identify the areas of impact on the Office of Security. These 
include: 

In order to restrict access to only authorized 
individuals overseas, the terminals and mini-computers 
must be installed in protected areas. Thorough reviews 
of proposed locations in respect to other equipment 
configurations, physical plans and alarmed areas 

must be conducted. Pre and post installation site 
surveys will be necessary in order to assure that 
installation meets system security requirements. 

° It will be necessary to develop tamper proof containers 


for shipment and storage of hardware and spare parts. 
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The development of emergency destruct equipment 

and procedures for magnetic storage media must be 

accelerated. 

° Require periodic review and testing of hardware by 

COMSEC to assure that equipment in the field has 

not been tampered with and maintains a constant 

Tempest profile. 

It will be necessary to conduct continuing reviews 

of major modifications to hardware/software to assure 

that the system continues to meet information systems 

security requirements. 

° It will be necessary to develop security education 
briefings and materials for end users regarding the 
use and protection of data. 

° It will be necessary to develop guidelines and 

procedures for information systems security to be 

used by physical security survey teams in conducting 


periodic inspections. (U) 


<1 
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22 January 1980 


MEMORANDUM FOR THE RECORD 


25X1A —s FROM : 
Chief, B Division, ODP 


SUBJECT : CRAFT Working Group Meeting - 18 January 1980 (S) 


REFERENCE: A Plan for Accelerating the Provision of ADP 
Support to DO Field Stations (S) 14 January 1980 


1. Attached is the agenda for the meeting. 


25X1A 2s ero a Ear || began the meeting by stating that nothing 
in the CRAFT requirements has fundamentally changed except for 
an added emphasis on security needs in the field. She stated 
that CRAFT funding is "up in the air". Peggy presented the 
following foils: 


a. Constraints (pages 7-8 of the Plan - 
see reference) 


b. Assumptions (pages 8-9 of the Plan) 


c. Option Evaluation Matrix (page 33 of the Plan) (S) 


25X1A 3. Po engaged in a dialog with (_—————_ 25X1A 
C/E/B&F/BL. 

25X1A Q ——— "| Will there be a compartmentation problem? 

25X1A , i : This is a "selling" job. Confidence 


in compartmentation controls ina 
system will develop with experience. 


DERIVATIVE CLBY 1 7S B03. ae oe 
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How should the priority of deployment 
be established (which stations first?) 


The question is the selection of a 
criteria, e.g., magnitude of data 
conversion, size of station, etc. 

From a security viewpoint mid-size 

and small stations are more vulnerable 
to being overrun. 


Will each station be responsible for 
its own site survey? 


No. IMS will handle it supported by 

a records management officer, OC © 
representative, and ADP specialist. (S) 
4, When asked by Peggy for OC's reaction to the paper, 
contributed: "If sufficient money and people are 
provided (to do the work) otherwise it's not feasible." This 
was the full extent of OC's comments at the meeting. Peggy 


responded by a brief mention of the present funding for the 
25X1A Pah eee ye ee ke ay activities. The Overseas Prototype 


25X1A 


is only in the planning stage. She also mentioned the 30 January 
EXCOM meeting when the members of that committee will be brought 
up to date on the project. Funding may be discussed at that 
time. (S) 


5. I asked for a clarification on the meaning of the 
compatibility of the short-term and long-term solutions as the 
architectures are so different. ani responded by stating 
that the two approaches are functionally compatible and there 
will be some compatibility of hardware. (i.e., the use of the 
Agency standard terminal in both configurations). Al stated 
that all procurements of the Agency standard terminal will go 
through ODP. Procurement actions for terminals will be initiated 
in the third quarter of FY-80. He also stated that the Plan was 
not intended to imply any resource requests for the Working Group 
sponsoring organization. (S) 
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Ts rere, ISSG/OS stated a need for added 
emphasis to be placed on destruction techniques for non-paper 
media including large scale destruction. He requested that a 
Security representative be added to the site survey teams. 

It was during this discussion that Peggy mentioned a plan the 
U.S. Army has for the deployment of 300 Honeywell minicomputers 
overseas. (S) 


8. The Audit Staff representative had no significant 
contribution. (A/IUO) 


os PR of OTR reques larify its 
training needs in support of CRAFT. ventured that 20X1A 


some special courses for CLASS A officers may be needed similar 
to the GAS training OTR provided. I reminded Bob of his 
responsibility to include this in the CLASS A Training Plan 
(contained in the CLASS A Project Plan paper). I told Dave 
that training on the general usage of the Agency standard 
terminal is to be coordinated through ODP's Training Staff. (C) 


10. SS gave an overview (slide presentation) of 
OC's Project Mercury. (C) 


11. The next meeting is scheduled for 8 February 1980. (U) 


Attachment: Agenda 
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25X1A Il. 
III. 


18 January, 1980 


AGENDA OF CRAFT WORKING GROUP MEETING 


“ACCELERATED CRAFT" PROPOSAL 
a. ~ Introductory remarks 
b. ~ Discussion 


MERCURY BRIEFING 
ae 


NEXT MEETING - FEB 8, 1980 
ROOM 1D35 
TIME: 1000 
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